Name
F1. The Oxymoron Known as Agile Security
Date & Time
Thursday, May 11, 2017, 11:15 AM - 12:15 PM
Greg Sternberg
Description
Session Description:
 
Some 15+ years ago the Agile Manifesto was published and took the development world by storm. The thoughts, principles and approaches described in that Manifesto have, and continue to have, a significant and lasting effect on how every aspect of software development and engineering. Except security. Is it because agile and security have nothing in common and no common ground? Is because they are viewed as contradictory and opposing forces? I suspect most of us would choose the latter. Join me as we strip the hype from Agile and look at how it's principles can, and should, be a natural part of security.
 
 
Location Name
Room 703
Full Address
Colorado Convention Center
700 14th Street
Denver, CO 80202
United States
Category
AppSec
Learner Objectives
After completing this session, the learner will:
  • Learn the de-hyped philosophy behind Agile
  • Understand why security must be agile
  • Discover what Agile can do for security
  • See ways of making the securing of the development process agile, regardless of what methodology you are using
 
Speaker Bio(s)
Greg Sternberg is a Security Architect at Sungard Availability Services and the CISO for ISSA, Denver . He works across all facets of software incorporating security into the SDLC and securing architectures. He has published, blogged and presented on security and architecture topics at various security and architecture conferences. He holds CISSP, CISM and TOGAF certifications.
 
Sorting Order
1